Filter and search through 199,166 vulnerabilities
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2026-0760 | Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote ... | 0.0 | 0 | Neutral | No |
| No |
| CVE-2026-0759 | Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attacker... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0758 | mcp-server-siri-shortcuts shortcutName Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate pri... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0757 | MCP Manager for Claude Desktop execute-command Command Injection Sandbox Escape Vulnerability. This vulnerability allows remote attackers to bypass th... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0756 | github-kanban-mcp-server execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0755 | gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0750 | Improper Verification of Cryptographic Signature vulnerability in Drupal Drupal Commerce Paybox Commerce Paybox on Drupal 7.X allows Authentication By... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0749 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Form Builder allows Cross-Site Scripting ... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0713 | A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard and folder permissions. The vul... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0712 | An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Gr... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0705 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.4.2... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0675 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in webaware NextGEN Download Gallery nextgen-download-gallery... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-0672 | When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-0663 | Denial-of-service vulnerability in M-Files Server versions before 26.1.15632.3 allows an authenticated attacker with vault administrator privileges to... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0650 | OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware. Due to improper handling of pa... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-0629 | Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to ... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0625 | Multiple D-Link DSL gateway devices contain a command injection vulnerability in the dnscfg.cgi endpoint due to improper sanitization of user-supplied... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0601 | A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0600 | Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to config... | 0.0 | 0 | Neutral | No | No |
| CVE-2026-0519 | In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. ... | 0.0 | 0 | Neutral | No | No |